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CLAIMS 



!• A method of configuring a lock system (100) owned 

by a lock system owner and comprising a management 
5 computer (110) connected to a plurality of door access 
control units (120), said method comprising the 
following steps : 

a) installing in the door access control units a first 
certificate issued by a manufacturer (10) of the lock 

10 system; 

b) providing at the management computer (110) a second 
certificate issued by the lock system owner and 
signed by the manufacturer; 

c) transmitting from the management computer to a first 
15 door access control unit of the door access units the 

signed second certificate together with a symmetric 
encryption key used by the lock system owner; 

d) installing by means of asymmetric encryption the 
second certificate at the first door access control 

20 unit after checking the authenticity of the signed 

second certificate; and 

e) establishing of symmetric encryption communication 
between the management computer and the first door 
access unit. 



25 2. The method according to claim 1, wherein a unique 

symmetric encryption key is used for each door access 
control unit. 
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3. The method according to claim 1 or 2^ wherein the 

step of installing a first certificate is performed 
under the control of a boot strapped security feature in 
the door access control unit* 

5 4. The method according to any of claims 1-3/ 

wherein the step of providing at the management computer 
a second certificate is performed on-line through a 
procedure, wherein a receiver identifies himself or 
herself, 

10 5. The method according to claim 4, wherein the 

identity of the receiver is indicated in the second 
certificate as attributes. 

6. The method according to any of claims 1-5, 
wherein the step of providing a second certificate 

15 comprises providing a symmetric encryption key pair. 

7. The method according to any of claims 1-6, 
wherein the step of transmitting from, the management 
computer to a first door access control unit the signed 
second certificate is preformed as an SSL-session. 

20 8. The method according to any of claims 1-7, 

wherein the step of installing the second certificate 
involves keeping the first certificate so as to verify 
data from the manufacturer. 

9. A lock system (100) owned by a lock system owner 

25 and comprising a management computer (110) connected to 
a plurality of door access control units (120), 



characterized by 
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— a first certificate issued by a manufacturer (10) of 
the lock system provided in the door access control 
units (120); 

— a second certificate issued by the lock system owner 
5 and signed by the manufacturer provided in the 

management computer (110); 

— a symmetric encryption key pair provided in the 
management computer and a respective door access 
control unit (120); and 

10 — a public asymmetric encryption key for the manu- 
facturer provided in the door access control units. 

10. The lock system according to claim 9, wherein a 

unique symmetric encryption key is provided for each 
door access control unit. 



15 



